CVE-2022-26711

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

• CWE-190

• https://support.apple.com/en-us/HT213253Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213254Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213257Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213258Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213259Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213253Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213254Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213257Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213258Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213259Release Notes, Vendor Advisory

Published

May 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26706An access issue was addressed with additional sandbox restri…5.5
• CVE-2022-26707An issue in the handling of environment variables was addres…5.5
• CVE-2022-26708This issue was addressed with improved checks. This issue is…9.8
• CVE-2022-26709A use after free issue was addressed with improved memory ma…8.8
• CVE-2022-2671A vulnerability was found in SourceCodester Garage Managemen…8.8
• CVE-2022-26710A use after free issue was addressed with improved memory ma…8.8
• CVE-2022-26712This issue was addressed by removing the vulnerable code. Th…5.5
• CVE-2022-26714A memory corruption issue was addressed with improved valida…7.8
• CVE-2022-26715An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2022-26716A memory corruption issue was addressed with improved state …8.8
• CVE-2022-26717A use after free issue was addressed with improved memory ma…8.8
• CVE-2022-26718An out-of-bounds read issue was addressed with improved inpu…7.8